This tutorial will show you how to turn on or off scareware blocker in Microsoft Edge for your account or all users in Windows 10 and Windows 11.
Scareware blocker is now available in for Microsoft Edge, and is turned on by default. Scareware blocker allows Microsoft to use AI to detect potential tech scams.
Today, Edge uses Microsoft Defender SmartScreen to block known scams as people encounter them. But what if you’re the first person to see a new scam before it can be blocked? What if a scam hits your coworkers, your friends, or your family? While no one is immune, these scams particularly prey on vulnerable elderly communities.
“Scareware” scams are a particularly convincing type of tech support scam. They use aggressive web pages to convince victims into thinking their system is infected with malware, pressure them to call a fake tech support number, and try to gain access to the computer. Last year, Hollywood even made a blockbuster action movie with scareware scammers as the villains.
Scareware blocker uses a machine learning model to recognize the tell-tale signs of scareware scams and puts users back in control of their computer. We call on users who want to combat scams to help us test our preview.
As mentioned above, most people who land on a scam in Edge will be protected by Defender SmartScreen, which provides real-time checks on new and unfamiliar sites where abuse is more likely to hide. Once an abusive site is detected, SmartScreen can protect users worldwide within minutes.
Scareware blocker adds a new, first line of defense to help protect the users exposed to a new scam if it attempts to open a full screen page. Scareware blocker uses a machine learning model that runs on the local computer. The model uses computer vision to compare full screen pages to thousands of sample scams that the scam-fighting community shared with us. The model runs locally, without saving or sending images to the cloud.
When scareware blocker suspects a page is a scam, Edge will put users back in control by exiting full screen mode, stopping aggressive audio playback, warning the user, and showing a thumbnail of the page they were just viewing.
Once the user is back in control of their browser, scareware blocker will let them report the malicious site to protect others. Users can share a screenshot of the scam and other diagnostics with Microsoft, helping the Defender SmartScreen service detect scareware outbreaks across multiple machines. If they don’t choose to report, the scareware blocker model will discard the page.
Starting with Microsoft Edge 142+, if Scareware blocker detects a suspicious full-screen page, the new scareware sensor in Edge can notify SmartScreen about the potential scam immediately, without sharing screenshots or any extra data beyond what SmartScreen already receives. This real-time report gives SmartScreen an immediate heads-up to help confirm scams faster and block them worldwide. Later, Microsoft will add more anonymous detection signals to help Edge recognize recurring scam patterns. This new scareware sensor setting is disabled by default for the time being, but Microsoft intends to enable it for users who have SmartScreen enabled, since any scam the sensor detects would be a scam that SmartScreen missed. Even with the scareware sensor disabled though, Scareware blocker will still work as expected. Also, the scareware sensor is always disabled for InPrivate mode. Finally, users can choose to disable SmartScreen entirely, though Microsoft strongly recommend leaving it enabled.
References:
Protecting more Edge users with expanded Scareware blocker availability and real-time protection
Stand up to scareware with scareware blocker, now available in preview in Microsoft Edge
Scareware blocker | Microsoft Edge
Microsoft Edge Browser Policy Documentation ScarewareBlockerAllowListDomains
- Option One: Turn On or Off Scareware Blocker in Microsoft Edge for Current User from Settings
- Option Two: Enable or Disable "Scareware Blocker" in Microsoft Edge for All Users using REG file
- Option Three: Enable or Disable "Block sites detected as scams" in Microsoft Edge for All Users using REG file
- Option Four: Enable or Disable "Share detected scam sites with Microsoft Defender SmartScreen" in Microsoft Edge for All Users using REG file
EXAMPLE: Scareware blocker in Microsoft Edge
1 Open Microsoft Edge.
2 Click/tap on the Setting and more (Alt+F) 3 dots button, and click/tap on Settings. (see screenshot below)
3 Click/tap on Privacy, search, and services in the left pane, and click/tap on Security in the right pane. (see screenshot below)
If you do not see a left pane, then either click/tap on the 3 bars menu button towards the top left OR widen the horizontal borders of the Microsoft Edge window until you do.
4 Do step 5 (on) or step 6 (off) below for what you want.
This is the default setting.
7 You can now close the Settings tab if you like.
You must be signed in as an administrator to use this option.
This option uses the ScarewareBlockerProtectionEnabled policy for Microsoft Edge.
1 Do step 2 (always enable), step 3 (disable), or step 4 (default) below for what you want.
This will override and gray out Option One.
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"ScarewareBlockerProtectionEnabled"=dword:00000001
This will override and gray out Option One.
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"ScarewareBlockerProtectionEnabled"=dword:00000000
This is the default setting to allow using Option One.
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"ScarewareBlockerProtectionEnabled"=-
5 Save the .reg file to your desktop.
6 If you have Smart App Control turned on, you will need to unblock the downloaded REG file.
7 Double click/tap on the downloaded .reg file to merge it.
8 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.
9 If Microsoft Edge is currently open, then close and reopen Microsoft Edge to apply.
10 You can now delete the downloaded .reg file if you like.
Enable or Disable "Block sites detected as scams" in Microsoft Edge for All Users using REG file
You must be signed in as an administrator to use this option.
This option uses the ScarewareBlockerBlocksDetectedSitesEnabled policy for Microsoft Edge.
1 Do step 2 (always enable), step 3 (disable), or step 4 (default) below for what you want.
This requires Scareware Blocker to be turned on or enabled.
This will override and gray out Option One.
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"ScarewareBlockerBlocksDetectedSitesEnabled"=dword:00000001
This will override and gray out Option One.
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"ScarewareBlockerBlocksDetectedSitesEnabled"=dword:00000000
This is the default setting to allow using Option One.
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"ScarewareBlockerBlocksDetectedSitesEnabled"=-
5 Save the .reg file to your desktop.
6 If you have Smart App Control turned on, you will need to unblock the downloaded REG file.
7 Double click/tap on the downloaded .reg file to merge it.
8 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.
9 If Microsoft Edge is currently open, then close and reopen Microsoft Edge to apply.
20 You can now delete the downloaded .reg file if you like.
Enable or Disable "Share detected scam sites with Microsoft Defender SmartScreen" in Microsoft Edge for All Users using REG file
You must be signed in as an administrator to use this option.
This option uses the ScarewareBlockerSendDetectedSitesToSmartScreenEnabled policy for Microsoft Edge.
1 Do step 2 (always enable), step 3 (disable), or step 4 (default) below for what you want.
This requires Scareware Blocker to be turned on or enabled.
This will override and gray out Option One.
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"ScarewareBlockerSendDetectedSitesToSmartScreenEnabled"=dword:00000001
This will override and gray out Option One.
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"ScarewareBlockerSendDetectedSitesToSmartScreenEnabled"=dword:00000000
This is the default setting to allow using Option One.
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"ScarewareBlockerSendDetectedSitesToSmartScreenEnabled"=-
5 Save the .reg file to your desktop.
6 If you have Smart App Control turned on, you will need to unblock the downloaded REG file.
7 Double click/tap on the downloaded .reg file to merge it.
8 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.
9 If Microsoft Edge is currently open, then close and reopen Microsoft Edge to apply.
10 You can now delete the downloaded .reg file if you like.
That's it,
Shawn Brink
Attachments
-
Always_enable_Scareware_Blocker_in_Microsoft_Edge_for_all_users.reg650 bytes · Views: 592
-
Default_user-choice_Scareware_Blocker_in_Microsoft_Edge.reg624 bytes · Views: 458
-
Disable_Scareware_Blocker_in_Microsoft_Edge_for_all_users.reg650 bytes · Views: 519
-
Always_enable_Scareware_Blocker_to_block_sites_detected_as_scams_in_Edge_for_all_users.reg676 bytes · Views: 257
-
Default_user-choice_Scareware_Blocker_to_block_sites_detected_as_scams_in_Edge.reg650 bytes · Views: 260
-
Disable_Scareware_Blocker_to_block_sites_detected_as_scams_in_Edge_for_all_users.reg676 bytes · Views: 265
-
Always_enable_Scareware_Blocker_share_detected_scam_sites_with_SmartScreen_in_Edge_for_all_users.reg698 bytes · Views: 250
-
Default_user-choice_Scareware_Blocker_share_detected_scam_sites_with_SmartScreen_in_Edge.reg672 bytes · Views: 267
-
Disable_Scareware_Blocker_share_detected_scam_sites_with_SmartScreen_in_Edge_for_all_users.reg698 bytes · Views: 266












